Hi Y'all,

I've RTFM'd a bunch on this and can't find a clear answer, so to the lists I
go...  ;)

I can now create a cert/key pair quickly as such:

# openssl req -newkey rsa:2048 -x509 -nodes -out test.pem -keyout test.pem
-days 3650

And after answering the questions, I get a certificate and key in the same
file.  All is well.  Basically I don't need my certs signed for what I'm
using them for, so no CA is required for my purpose here.

I was wondering if there was also a way to quickly create a certificate and
key file in a similar fashion while also designating SubjAltName options on
the openssl command line?  Something like this maybe?

openssl req -newkey rsa:2048 -x509 -nodes -out test.pem -keyout test.pem
-days 3650 -subjAlt "DNS:foo.com, DNS:bar.com"

or whatever.  I know the "-subjAlt" option doesn't exist, but maybe there is
something like it that I can invoke without having to configure a custom
openssl.cnf config file for every one of these I want to create?

Thanks in advance for any insight!!!

cheers,
erich



--
View this message in context: 
http://openssl.6102.n7.nabble.com/Add-SubjAltName-to-openssl-command-line-tp46384.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to